I think the impact is that once your computer/device is compromised, you can't be sure that disinfecting it worked. I think it also makes it possible (though not necessarily easy) for somebody to compromise the device if they have physical access to it - that may matter more for regular users under authoritarian or pre-authoritarian regimes.